The safeguards map / 4.3 Clocks, notification and correction
Copa (Copacetic)
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A command-line tool that patches vulnerable packages in container images from a scanner's vulnerability report, without a full rebuild.
Where it sits
4.3 Clocks, notification and correction (primary): Patches vulnerable packages in an existing container image without a full rebuild, working from a vulnerability scanner's results.
copa is an Open Source CLI tool written in Go and based on buildkit that can be used to directly patch container images without full rebuilds.
captured
`copa` can also patch container images using the vulnerability scanning results from popular tools like
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who distribute itthose who run it
- Runs
- by handin CI
Handoffs
consumes Vulnerability status: vulnerability scanning results from a scanner
Collector's note
In 4.3 as correction after the fact: patching a component found vulnerable. Home and maturity rest on the project's own statement.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.